Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:36567
HistoryAug 02, 2022 - 1:44 p.m.

Authorization Bypass

2022-08-0213:44:21
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
12

0.001 Low

EPSS

Percentile

19.6%

github.com/sourcegraph/sourcegraph is vulnerable to authorization bypass. The vulnerability exists in UpdateSavedSearch function in saved_searches.go because the update permissions are not properly handled which allows an attacker to delete other user’s saved search information.

0.001 Low

EPSS

Percentile

19.6%

Related for VERACODE:36567